CVE-2026-92983

Name of the Vulnerable Software and Affected Versions InternLM LMDeploy versions prior to 0.17.1

Description In DistServe prefill/decode disaggregation mode, the proxy uses user-facing session IDs instead of internal scheduler keys, which prevents the release of scheduler sessions. Unauthenticated attackers can send completion requests to the proxy endpoint, causing unreleased scheduler metadata and memory to accumulate until the prefill worker is terminated due to an out-of-memory condition.

Recommendations Update InternLM LMDeploy to version 0.17.1 or later.